Git · Vulnerability Disclosure

Git Vulnerability Disclosure

Vulnerability disclosure

Git runs a coordinated vulnerability disclosure program on Hackerone.

DistributedGitOpen SourceSource Code ManagementVersion Control
Program: Hackerone

Disclosure Policy

Security Contact

Source

Vulnerability Disclosure

Raw ↑ 
generated: '2026-06-20'
method: searched
probe: true
source: /.well-known/security.txt on github.com, gitlab.com, gitea.com
programs:
  - provider: GitHub
    policy: [https://bounty.github.com]
    contact: [https://hackerone.com/github]
    bug_bounty: https://hackerone.com/github
    acknowledgments: https://hackerone.com/github/hacktivity
    evidence:
      - {source: well-known/git-github-security.txt, kind: security.txt}
  - provider: GitLab
    policy: [https://hackerone.com/gitlab/, https://about.gitlab.com/security/disclosure/]
    contact: [https://hackerone.com/gitlab/]
    bug_bounty: https://hackerone.com/gitlab/
    acknowledgments: https://hackerone.com/gitlab/thanks
    evidence:
      - {source: well-known/git-gitlab-security.txt, kind: security.txt, signed: pgp}
  - provider: Gitea
    policy: [https://github.com/go-gitea/gitea/blob/main/SECURITY.md]
    contact: [https://github.com/go-gitea/gitea/blob/main/SECURITY.md]
    evidence:
      - {source: well-known/git-gitea-security.txt, kind: security.txt}